CVE-2023-48670

HIGH 7.3

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with elevated privileges.

CWE	CWE-426
Vendor	dell
Product	supportassist client consumer
Published	Dec 22, 2023
Last Updated	Feb 25, 2026

Stay Ahead of the Next One

Get instant alerts for dell supportassist client consumer

Be the first to know when new high vulnerabilities affecting dell supportassist client consumer are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Dell / SupportAssist Client Consumer

3.14.2.45116

References

NVD ↗ CVE.org ↗ EPSS Data ↗

dell.com: https://www.dell.com/support/kbdoc/en-us/000220677/dsa-2023-468-security-update-for-dell-supportassist-for-home-pcs-installer-file-local-privilege-escalation-vulnerability

Credits

Dell would like to thank Dohyun Lee (@l33d0hyun) for reporting this issue.